fix the release verification instructions for Linux

verify-release.sh runs in a child process, so the "cd src" appended to it in 7163147 never reached the reviewer's shell and left them one level above the Dockerfile, breaking the docker build step. Move the step back into release-review.adoc and align the manual extract block with it.

Author: FreeAndNil

scripts/verify-release.sh

@@ -59,4 +59,6 @@ mkdir -p src
 cd src
 unzip -q -o ../*source*.zip
 
-cd src
+# Do not "cd" here to position the reviewer: this runs as "bash ./verify-release.sh", so a child
+# process, and the change would be lost. The step stays in release-review.adoc, typed by the reviewer.
+echo "Sources extracted to $(pwd)"

src/site/antora/modules/ROOT/pages/release-review.adoc

@@ -141,13 +141,18 @@ for sigFile in *.asc; do gpg --verify $sigFile ${sigFile%.asc}; done
 +
 [source,bash]
 ----
-mkdir -p src
-cd src
-unzip -q -o ../*source*.zip
+unzip -q -o *source*.zip -d src
+----
+====
 
+// Keep this step here: verify-release.sh runs in a child process, so it cannot cd for the reader,
+// and the next step needs the extracted root (the Dockerfile), not the src below it.
+. Switch to the extracted sources, which is the directory holding the `Dockerfile`:
++
+[source,bash]
+----
 cd src
 ----
-====
 
 . Verify the build (install https://docs.docker.com/engine/install[docker], if you haven't already):
 +